From e8623dfd6cf12ec37d7d477d856a2d88ab4b14f9 Mon Sep 17 00:00:00 2001
From: omer-wachsberger <92664943+omer-wachsberger@users.noreply.github.com>
Date: Sun, 21 Nov 2021 22:01:07 +0200
Subject: [PATCH] Team4-login1.php

The changes are in lines 61-69 and 78
---
 www/login1.php | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/www/login1.php b/www/login1.php
index 5dd91e7..3a9c105 100644
--- a/www/login1.php
+++ b/www/login1.php
@@ -57,12 +57,25 @@
       <div class="row marketing">
         <div class="col-lg-6">
 
+<?php
+   function check_string($my_string){
+     $regex = preg_match('/[\'\/~`\!@#\$%\^&\*\(\)_\-\+=\{\}\[\]\|;:"\<\>,\.\?\\\]/', $my_string);
+      if($regex == 1)
+{
+         print("Username has not been accepted - invalid character. Are you trying to hack? We are smarter than you");
+         exit();
+}
+   }
+?>
+
+
 <?php
 //echo md5("pa55w0rd");
 
 if (!empty($_REQUEST['uid'])) {
 $username = ($_REQUEST['uid']);
 $pass = $_REQUEST['password'];
+check_string($username);
 
 $q = "SELECT * FROM users where username='".$username."' AND password = '".md5($pass)."'" ;
 
@@ -136,4 +149,4 @@
 	</div> <!-- /container -->
   
 </body>
-</html>
\ No newline at end of file
+</html>